Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/HoDvxsQA4iXxpxVk1_co_JtvvPE.roa
File: HoDvxsQA4iXxpxVk1_co_JtvvPE.roa (raw, json)
Hash identifier: cWutlJOtBJ4KMx+ET4BMORGB6H9YK5+9Bn/1o272ZUM=
Subject key identifier: 1E:80:EF:C6:C4:00:E2:25:F1:A7:15:64:D7:F7:28:FC:9B:6F:BC:F1
Certificate issuer: /CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Certificate serial: 01942369699130F53EF0AC9AF40AA89D1A53
Authority key identifier: 9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/HoDvxsQA4iXxpxVk1_co_JtvvPE.roa
Signing time: Wed 01 Jan 2025 19:48:18 +0000
ROA not before: Wed 01 Jan 2025 19:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12817
IP address blocks: 194.145.150.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:69:91:30:f5:3e:f0:ac:9a:f4:0a:a8:9d:1a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Validity
Not Before: Jan 1 19:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e80efc6c400e225f1a71564d7f728fc9b6fbcf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:14:7c:af:33:0b:0c:ec:8f:f5:7b:85:ab:
07:9e:4d:47:b1:af:35:c6:af:7b:6a:76:a7:23:d5:
e0:27:f6:62:e2:f4:c1:ea:7c:b1:20:ae:13:11:2c:
16:cb:a2:22:cd:e9:44:4b:f4:21:85:aa:b8:80:9f:
21:92:d2:33:5c:ba:e9:fc:9c:d2:6d:a2:e2:03:a8:
36:b1:bf:fd:4b:e5:90:af:41:ef:87:68:5d:bc:05:
ac:1e:b1:35:3c:85:aa:12:88:30:e9:58:d9:b2:93:
2d:01:ff:69:a9:46:4e:30:8b:8f:f9:4a:3a:16:0a:
ce:c2:fa:f5:1f:d5:7c:61:b7:d0:86:c1:76:cd:20:
cc:7f:70:df:74:f5:33:03:80:d4:48:53:84:5d:c5:
71:d0:29:98:9a:33:c2:4e:64:fc:9d:45:01:2a:c0:
d8:f1:f9:ec:bf:14:38:5f:b2:9e:18:1e:fa:08:78:
7e:bc:be:39:4d:7a:b6:6c:64:d9:35:2c:97:df:4c:
b1:df:d5:19:26:07:83:ff:2c:89:cd:76:83:5c:a8:
67:c3:b4:86:88:5d:60:aa:a6:14:13:60:12:e7:38:
25:1f:63:42:64:22:7f:c7:e7:58:8b:a5:01:0e:f4:
e0:6b:ad:c6:08:b7:d4:8e:49:00:ae:f2:d6:12:cb:
54:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:80:EF:C6:C4:00:E2:25:F1:A7:15:64:D7:F7:28:FC:9B:6F:BC:F1
X509v3 Authority Key Identifier:
keyid:9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/HoDvxsQA4iXxpxVk1_co_JtvvPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.150.0/23
Signature Algorithm: sha256WithRSAEncryption
84:5a:3f:d5:4e:11:88:57:1f:63:44:a9:64:a9:b0:2f:89:57:
60:c3:c2:0f:e8:cf:44:94:85:43:b4:9b:1e:ec:23:05:41:1a:
87:fa:a0:ab:95:3d:83:e1:04:c4:78:d0:0a:9a:1e:dd:63:97:
23:a2:92:ad:1a:90:a5:99:17:b6:7b:0f:77:81:79:15:0e:92:
f5:59:d0:21:5a:b3:2d:d7:ea:9b:75:0c:ed:47:f5:3f:14:99:
ae:87:35:16:3c:55:4a:6d:30:83:4b:92:ea:5c:39:a6:24:72:
1f:90:0b:8d:ba:e2:a2:34:66:94:3a:de:ac:e4:43:c8:98:c8:
fc:b0:00:92:7f:f9:f7:1e:2c:56:58:ea:35:60:4c:4a:e0:d8:
45:ea:0d:3d:f6:41:0d:29:be:0e:25:7d:e1:03:e4:44:e7:23:
ef:ba:55:11:27:30:09:f4:72:71:ed:7f:98:c9:32:5f:df:03:
41:71:9a:16:8e:4b:e4:af:d3:4e:2b:23:91:83:ea:0c:74:60:
4a:47:29:0d:66:00:ce:e7:46:a6:e5:4d:e5:9f:e6:a8:4b:02:
b3:fe:f0:ea:48:9c:b6:4f:6d:bf:61:18:28:ba:20:c1:0c:77:
46:bf:43:e1:e8:26:71:46:04:b6:e2:50:8a:d2:54:66:03:a0:
e7:17:34:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:08 2025 by rpki-client on console.sobornost.net